<%@page import="java.util.ArrayList"%>
<%
        ArrayList<String> errors =  new ArrayList<String>();
        if (request.getSession().getAttribute("user") == null
                    && request.getSession().getAttribute("employee") == null){
            String redirectURL = "login.do";
            errors.add("You are not authenticated to enter this page");
            request.setAttribute("errors", errors);
            response.sendRedirect(redirectURL);
        }
    %>    